If the environment property "java.naming.referral" is set to "ignore" or the contents of the error do not contain a referral, throw a PartialResultException. Otherwise, use contents to build a referral.

Indicates that the LDAP server was unable to satisfy a request because one or more critical extensions were not available. Either the server does not support the control or the control is not appropriate for the operation type.

Indicates that the attribute value specified in a modify, add, or modify DN operation violates constraints placed on the attribute. The constraint can be one of size or content (string only, no binary).

Indicates the target object cannot be found. This code is not returned on following operations:* Search operations that find the search base but cannot find any entries that match the search filter.* Bind operations.

Indicates that during a bind operation, the client is attempting to use an authentication method that the client cannot use correctly. For example, either of the following cause this error:* The client returns simple credentials when strong credentials are required.* The client returns a DN and a password for a simple bind when the entry does not have a password defined.

0x31

49

LDAP_INVALID_CREDENTIALS

Indicates that during a bind operation one of the following occurred:* The client passed either an incorrect DN or password.* The password is incorrect because it has expired, intruder detection has locked the account, or some other similar reason.

0x32

50

LDAP_INSUFFICIENT_ACCESS

Indicates that the caller does not have sufficient rights to perform the requested operation.

0x33

51

LDAP_BUSY

Indicates that the LDAP server is too busy to process the client request at this time but if the client waits and resubmits the request, the server may be able to process it then.

0x34

52

LDAP_UNAVAILABLE

Indicates that the LDAP server cannot process the client's bind request, usually because it is shutting down.

0x35

53

LDAP_UNWILLING_TO_PERFORM

Indicates that the LDAP server cannot process the request because of server-defined restrictions. This error is returned for the following reasons:* The add entry request violates the server's structure rules.* The modify attribute request specifies attributes that users cannot modify.* Password restrictions prevent the action.* Connection restrictions prevent the action.

Indicates that the add or modify DN operation violates the schema's structure rules. For example:* The request places the entry subordinate to an alias.* The request places the entry subordinate to a container that is forbidden by the containment rules.* The RDN for the entry uses a forbidden attribute type.

0x41

65

LDAP_OBJECT_CLASS_VIOLATION

Indicates that the add, modify, or modify DN operation violates the object class rules for the entry. For example, the following types of request return this error:* The add or modify operation tries to add an entry without a value for a required attribute.* The add or modify operation tries to add an entry with a value for an attribute which the class definition does not contain.* The modify operation tries to remove a required attribute without removing the auxiliary class that defines the attribute as required.

0x42

66

LDAP_NOT_ALLOWED_ON_NONLEAF

Indicates that the requested operation is permitted only on leaf entries. For example, the following types of requests return this error:* The client requests a delete operation on a parent entry.* The client request a modify DN operation on a parent entry.

0x43

67

LDAP_NOT_ALLOWED_ON_RDN

Indicates that the modify operation attempted to remove an attribute value that forms the entry's relative distinguished name.

0x44

68

LDAP_ALREADY_EXISTS

Indicates that the add operation attempted to add an entry that already exists, or that the modify operation attempted to rename an entry to the name of an entry that already exists.

0x45

69

LDAP_NO_OBJECT_CLASS_MODS

Indicates that the modify operation attempted to modify the structure rules of an object class.